No longer restore PHP session via session-id passing in url as it is insecure. (Partly reverting rev 3179.)
Authored by: hansfn 2015-06-15
Parent: [r4449]
Child: [r4451]
