A chat application reuses one Bedrock agent session ID for all logged-in users. What is the most important correction?

1. Scope session identifiers and stored state to the authorized user and conversation.
2. Use the same shared ID but prepend the user display name to each message.
3. Increase the session timeout so users share context longer.
4. Disable output citations as the only isolation fix.