Force new session ID generation on login to prevent session fixation attacks

A penetration test of a Laravel projest using Cartalyst/Sentry reported that the same sessions id was used before and after authentication, exposing the web app to session fixation attacks.

This change to the login function calls down to the underlying Laravel session handler to migrate the existing session to a new ID.