Fixed #23957 -- Started deprecation toward requiring session verification.

Thanks Carl Meyer for review.