Extremely ugly solution to get the offending browser to not get the session. But how else should I do it?
Added comments, worked on avoiding session hijacking, but it's not really correct yet.
Working to get every test back up again after changes were made long time ago. They seem to be working except for the Session hijacking thingy