prevent fixation attack, http://en.wikipedia.org/wiki/Session_fixation
Merge pull request #418 from ORCID/dev-preventFixation

prevent fixation attack, http://en.wikipedia.org/wiki/Session_fixation