Refresh sessions based on old session in order to be revokable
Pull Userbin.js from HTTPS only if necessary