MDL-46561 session: use full session validation in \core\session\manager::session_exists()