Reverting problematic session_regenerate_id call in user model; rolling anti-session-fixation measures into session startup script
Merge branch 'master' of github.com:concrete5/concrete5