remove session check/destroy stuff, looks problematic
deinitialize session in login_sequence() instead of sessions.php
only destroy unlogged sessions
plugins/mail: remove secretkey stuff
updater: fix is_writable checking