Issue #3113971 by Spokje, mondrake, acbramley, phenaproxima, andypost, murilohp, mpdonadio, ravi.shankar, pavnish, pifagor, vladbo, JeroenT, voleger, Taran2L: Replace REQUEST_TIME in services

Issue #3377256 by elber, znerol, smustgrave, longwave, jungle, andypost: Correctly implement SessionHandlerInterface

Issue #2536052 by znerol, jungle, Rishi Kulshreshtha, smustgrave, alexpott, dawehner, quietone: Remove try...catch from SessionHandler::write

Issue #3296293 by andypost, amjad1233, mfb, smustgrave, _utsavsharma, jordanpagewhite, longwave, geek-merlin: Apply SensitiveParameter attribute

Issue #3152415 by Lal_, rik-dev, Matroskeen, daffie: Bracket-encapsulated field names for static queries in core/lib/Drupal/Core

Issue #2286655 by alexpott, attiks, mark_fullmer, nielsonm, Mark Slatinek, quietone, catch, dawehner, aburke626, justafish: Gender neutral language

Issue #2776975 by joelpittet, dawehner, tim.plunkett, xjm, pfrenssen: March 3, 2017: Convert core to array syntax coding standards for Drupal 8.3.x RC phase

Issue #2665992 by alexpott, klausi, heykarthikwithu, xjm, tstoeckler: @file is not required for classes, interfaces and traits

Issue #2228393 by almaudoh, andypost, pfrenssen, znerol, cpj, Dom.: Decouple session from cookie based user authentication

Issue #2463321 by amateescu: Serializing the database connection is dangerous and error-prone, make it unserializable again

Issue #2286971 by znerol, Berdir, almaudoh, cilefen: Remove dependency of current_user on request and authentication manager

Issue #2338727 by znerol, almaudoh: Replace static SessionManager::$enabled property with WriteSafeSessionHandler class and resolve hidden circular dependency between SessionManager and SessionHandler

Issue #2248977 by Berdir: Complete support for multi-value base fields in ContentEntitySchemaHandler and use it for the user.roles field

Issue #2378699 by klausi, David_Rothstein, pwolanin: Port session hijacking fixes from SA-CORE-2014-006 to Drupal 8

Issue #2330279 by znerol: Fixed When operating in mixed mode SSL: data from anonymous non-HTTP session is still available after login.

Issue #1498664 by andypost, plach, penyaskito | dawehner: Refactor user entity properties to multilingual.

Issue #2228341 by sun, znerol, skipyT, ParisLiakos: Objectify session management functions + remove session.inc.

Issue #2205295 by znerol, sun, cosmicdreams, skipyT, ParisLiakos, ianthomas_uk: Objectify session handler.