koajs/generic-session — pull request #33 by mkleehammer (2014-11-17 04:06:20+00:00)
Title: Delete session-id cookie if session not loaded.

To defend against session fixation attacks, delete the session-id cookie if the
store load fails.