bbangert/beaker — pull request #19 by VasiliyL (2012-05-28 19:05:00+00:00)
Title: Cookie-only session invalidate error.

Hello!

The official docs say:

>If a session should be invalidated, and a new session created and used during the request, the invalidate() method should be used

But when using cookie only session, *invalidate()* calls *delete()* method, which sets *expires* attribute to past. Thus cookie gets deleted by browser, and new session data becomes lost. Here is possible fix and testcase.

Thanks!