id	summary	reporter	owner	description	type	status	component	version	severity	resolution	keywords	cc	stage	has_patch	needs_docs	needs_tests	needs_better_patch	easy	ui_ux
27009	Make update_session_auth_hash() rotate the session key	Tim Graham	nobody	If contrib.auth.update_session_auth_hash()  rotates the session key, this invalidates stolen session cookies upon a password change.	Cleanup/optimization	closed	contrib.auth	1.10	Normal	fixed			Accepted	1	0	0	0	0	0