Looks like the session_fixation variable isn't used anymore in the code, is it really needed?