cleanSession should remove code_validated related keys.