CVE-2026-47360: mod_session_cookie: remove the session cookie also when the
session was loaded under a different SessionCookieRemove setting
mod_session_cookie: as in 2.4.69, with SessionCookieRemove On the session is
empty for later loads in the same request, so a SessionMaxAge refresh, a
SessionHeader update or a mod_auth_form login can lose session data