Sharing sessions from two separate systems is not a good idea.
We need to refactor the whole session layer, it should not be shared.
Scope:
- use
sid and PHPBB3 cookie only for verifying user was authenticated
- please note, session cookies may not be available
- store in it's own session cache (use the available Cache object, it could be separate)
- we can talk offline for some ideas how to set-it up