flash_data safety

[eluser]cahva[/eluser]
Every vhost should have its own directory for sessions (usually their own tmp dir) so this sharing across webservers is not a problem(hasnt been for years).

I meant that by default, CI should use native sessions, not cookies. Native sessions are secure and they work very nicely. Using cookies for session data is just dum. I dont know what mushrooms CI devs have eaten when they decided to disregard native session and go for the cookies instead..