$_SESSION global should start uninitialized

$_SESSION doesn't exist until session_start() is called.

Simple testcase;

```php
<?php 

$existsBefore = isset($_SESSION);
session_start();
var_dump($existsBefore);
var_dump(isset($_SESSION)); 
```