Only | and ! are invalid characters for PHP session keys

@willemave can you do a quick sanity check?