Refresh session lifetime (#187)

Stale session ids can cause premature session expiration after login.
Regenerating the session id provides the expected session lifetime, and
is also considered best practice for session management.

admin/index.php

@@ -5,6 +5,7 @@
 if ( ! defined('COOKIE_SESSION') ) define('COOKIE_SESSION', true);
 require_once("../config.php");
 session_start();
+session_regenerate_id(true);
 require_once("gate.php");
 if ( $REDIRECTED === true || ! isset($_SESSION["admin"]) ) return;
 

login.php

@@ -25,6 +25,7 @@ function login_redirect($path=false) {
 $PDOX = LTIX::getConnection();
 
 session_start();
+session_regenerate_id(true);
 error_log('Session in login '.session_id());
 
 $oauth_consumer_key = 'google.com';