Invalidate session on successful register to prevent POST replay.