Make POST /fxa_oauth/params to always return a new Hawk Session and to reject existing Hawk Session.