Added session hijacking simpletest.

See https://www.drupal.org/node/2399657