What do you mean exactly by “invalidating” the session? Clearing all the data you’ve stored in the session scope (e.g. for logout)? Invalidating the session in such a manner, that additionaly the cftoken is renewed?
What do you mean exactly by “invalidating” the session? Clearing all the data you’ve stored in the session scope (e.g. for logout)? Invalidating the session in such a manner, that additionaly the cftoken is renewed?