cartalyst/sentry — pull request #360 by brendanjhart (2014-02-11 23:02:31+00:00)
Title: Prevent session fixation attacks by migrating the session ID on login (for Laravel)

A security penetration test of a Laravel projest using Cartalyst/Sentry reported that the same session id was used before and after authentication, exposing the web app to session fixation attacks.

These changes allow the the login function to call down to the underlying Laravel session handler to migrate the existing session to a new ID.