🐛 Fix wrong handling of session protection signal
🐛 Fix wrong handling of session protection signal

We should only clear out the identity when the session has actually
been deemed deleted, not just on staleness due to e.g. a client IP
change.

Closes #3370

foosel/OctoPrint,foosel/OctoPrint,foosel/OctoPrint,foosel/OctoPrint