Fixed #23957 -- Started deprecation toward requiring session verification

`is` enabled