HUMAN VERIFICATION REQUIRED ASVS 7.2.4 Session tokens rotate after authentication

The application generates a new session token on user authentication, including re-authentication, and terminates the current session token.