public void setSessionId(Serializable sessionId) {
        nullSafePut(SESSION_ID, sessionId);
    }
The session key that is used to store whether or not the user is authenticated.
core/src/main/java/org/apache/shiro/subject/support/DefaultSubjectContext.java