Fix web2py session reuse vulnerability