on login, make sure to clear existing session vars and start from fresh (moving from migrate() to invalidate())

src/psm/Service/User.php

@@ -248,7 +248,7 @@ class User {
 	 */
 	protected function setUserLoggedIn($user_id, $regenerate = false) {
 		if($regenerate) {
-			$this->session->migrate();
+			$this->session->invalidate();
 		}
 		$this->session->set('user_id', $user_id);
 		$this->session->set('user_logged_in', 1);