multiple session cookies with session library

[eluser]WanWizard[/eluser]
Getting multiple cookies is a side-effect of the way the session libary works: every time you update something it writes a new cookie.

This can lead to issues when you have a session rotation in the the middle of your request, because

"If multiple cookies of the same name match a given request URI, one is chosen by the browser.
The more specific the path, the higher the precedence. However precedence based on other attributes, including the domain, is unspecified, and may vary between browsers. This means that if you have set cookies of the same name against “.example.org” and “www.example.org”, you can’t be sure which one will be sent back."

This means a browser can pick any, and if you have 10 cookies for the session, and after number 6 the id is rotated, there is quite a large chance that the browser will pick the wrong one, and the next request goes out with an invalid cookie...