Issue #2512734 by Wim Leers, dawehner, Berdir: session_test routes/controllers don't specify the appropriate cacheability metadata

Issue #1392754 by tss, justAChris, jhodgdon: Comply with new documentation standards for @file for namespaced class files

Issue #2478119 by znerol, andypost: Replace references to Session Manager with references to Session

Issue #2283637 by pfrenssen, dawehner, shivanshuag, znerol: Provide test coverage to prove that an AuthenticationProvider can initiate a session

Issue #2468873 by pfrenssen, Dom., dawehner, znerol, xjm: Test that the authentication provider doesn't leak authentication credentials from the previous request

Issue #2437761 by Dom., znerol: CSRF token seed and possibly other session data lost when set after a session regenerate

Issue #2265099 by znerol, neclimdul, rpayanm: Cleanup SessionHttpsTest and fix redirect to non-existing URL after POST requests

Issue #2457887 by prateekMehta, stefan.r, rpayanm, alexpott: Use Utility\SafeMarkup class instead of Utility\String for placeholder(), checkPlain(),format() functions

Issue #2426031 by almaudoh, cpj: Remove deprecated uses of SessionManager::isEnabled(), SessionManager::enable() and SessionManager::disable()

Issue #2229145 by znerol, neclimdul, larowlan, alexpott, joelpittet, almaudoh, tadityar: Register symfony session components in the DIC and inject the session service into the request object

Revert "Issue #2229145 by znerol, neclimdul, larowlan, joelpittet, almaudoh: Register symfony session components in the DIC and inject the session service into the request object"

This reverts commit b926f5d8.

Issue #2229145 by znerol, neclimdul, larowlan, joelpittet, almaudoh: Register symfony session components in the DIC and inject the session service into the request object

Issue #2090969 by lokapujya, tstoeckler, mgifford, mikemiles86: Minor code-style issues in SessionTestController

Issue #2363139 by Wim Leers, dawehner, larowlan: _content controllers may only return render arrays, not strings.

Issue #2245003 by znerol, YesCT, sun, damiankloip: Use a random seed instead of the session_id for CSRF token generation.

Issue #2228341 by sun, znerol, skipyT, ParisLiakos: Objectify session management functions + remove session.inc.

Issue #2180109 by damiankloip, dawehner, ParisLiakos, joelpittet, MartijnBraam, Xano: Change the current_user service to a proxy.

Issue #2177093 by sun, alexpott, InternetDevels, Xano: Remove 'access content' permission from all test module routes.

Issue #2068471 by dawehner, Crell, tim.plunkett, jibran, fubhy, larowlan: Normalize Controller/View-listener behavior with a Page object.

Issue #2051097 by dawehner, Manuel Garcia, tlattimore, neclimdul: Change 'pattern' to 'path' in *.routing.yml files.

Issue #1981368 by tim.plunkett, Crell, webchick: Convert all routes to 'module_name().foo_bar()' naming convention.

Issue #1987572 by mrded, vijaycs85, Sean Buscay: Convert session_test() callbacks to a new style controller.

Issue #1890878 by corvus_ch, ygerasimov, berenddeboer, Crell, fubhy the cat, effulgentsia: Add modular authentication system, including Http Basic; deprecate global .

Issue #1668866 by ParisLiakos, aspilicious, tim.plunkett, pdrake, g.oechsler, dawehner, Berdir, corvus_ch, damiankloip, disasm, marcingy, neclimdul: Replace drupal_goto() with RedirectResponse.