Background: we made sure in the past month that the session is access via \OC::$session and not via $_SESSION