Fixed #23957 -- Started deprecation toward requiring session verification

Not a big fan of adding URLs which might break to the code base, but I'd happily add "after reading the upgrade considerations in the 1.8 release notes."