It could very well be false documentation -- it's just a direct copy from the wiki.

http://docs.elgg.org/wiki/Session_security