Security: We need to generate a new session id when user logs in.

We are should generate a new session see code here:
http://code.google.com/p/wave-protocol/source/browse/src/org/waveprotocol/box/server/rpc/AuthenticationServlet.java#127

This can be a security vulnerability.

—
Issue imported from http://code.google.com/p/wave-protocol/issues/detail?id=132

Owner: so...@google.com
Label: Type-Defect
Label: Priority-Medium
Stars: 1
State: open
Status: Accepted