* Register a shutdown function to close the session instead of closing it in the tep_redirect() function
* Also check for , (comma) and - (minus) in the session ID (bug #601)
When redirecting from HTTPS -> HTTP and replacing the url with a HTTPS version, also take DIR_WS_HTTPS_CATALOG into consideration (bug #492)