Translations:Manual:SessionManager and AuthManager/65/en

This is still worthwhile, since we can check that the saved session metadata identifies the same user to prevent someone from using a session ID that has expired and been reassigned to a different user.