This change set eliminates the need for cryptographically authenticated cookies and relies on sec-module providing accurate information on the SID provided by the client.