Applied Michael Cleverly's patch #188 which updates last_hit field of sec_session_properties, which makes the code that sweeps out old, dead tuples work.
Applied Michael Cleverly's patch #189, which cure's brokeness in signed and verified values caused by IE's friendly insistence on inserting a CR when it sees a LF.