Do not invalidate http session if there is an invalid security key (#11335)

Change-Id: I55c3bc83abc33d8bfd9bb45d84fb992236174be2
Enable testing on IE10 (#9219)

Change-Id: I990c439b5e9f5a444a1da06563344491bd93cf41