fix(api): identify session clients correctly and attribute handoff sessions (#1727)