hotifx session fixation and session destruction

Regens session id on login
Destroys session on logout