we now store the old session as a hash before the session is reset in order to protect against session fixation attacks
Merge pull request #1 from amaabca/session-retention

we now store the old session as a hash before the session is reset in or...