Add more cases where we regenerate the session id
Add more cases where we regenerate the session id

In an attempt to stop session fixation attacks, we want to make sure we
don't reuse the same session ID after it has expired, or the backend
data failed to to unpack/deserialize.

usingnamespace/pyramid_pluggable_session,sontek/pyramid_pluggable_session