PHP 5.3 strict session

This patch implements

https://wiki.php.net/rfc/strict_sessions
CVE-2011-4718