package org.ohdsi.webapi.util;

import org.apache.commons.lang3.RandomStringUtils;


/**
 *
 */
public final class SessionUtils {
    public static final String sessionId(){
        return RandomStringUtils.randomAlphanumeric(10);
    }
}

package org.ohdsi.webapi.util;

import org.ohdsi.sql.SqlTranslate;

/**
 *
 */
public final class SessionUtils {
    
    public static final String sessionId() {
        return SqlTranslate.generateSessionId();
    }
}

Use SqlTranslate to generate random since there is some additional logic involved (e.g. non-numeric initial character)