#6591 - renamed application_controller_spec into limit_session_lifetime.
This prepares the project for the next concern to proofe ip address restrictions.
#6591 - moved session lifetime limitation into its own module.
This prepares the project for the next concern to proofe ip address restrictions.
#6591 - extracted and renamed callback for handling of invalid sessions.
Note: This may break depending projects. Version bump
#6591 - Added second security module "IP address binding"
With IP address binding a session is fixated to the ip address of the session initiator.