Making sure session did not change. If using logins, it could be a security risk to have formstates be accepted from old sessions.
Merge pull request #388 from spekary/bugfix-DbBackedFormStateSession

QDbBackedFormState handler will return form states not from the current session. This is a security hole if logins are being used to access certain pages.