The old session ID may not exist in the session registry if the user is not authenticated. Closes gh-9011