Issue #2631220 by kentr, kscheirer, neclimdul, greggles, oily, quietone, znerol, andypost, bbrala, alexpott, tstoeckler: Session fixation for anonymous users - discard invalid session identifiers instead of accepting them
