Regenerate session ID before setting authentication data

 uphpCAS.php

@@ -148,6 +148,7 @@
            return $_SESSION[$this->sessionName];
        } elseif(isset($_REQUEST['ticket'])) {
            $user = $this->verifyTicket($_REQUEST['ticket']);
            session_regenerate_id();
            $_SESSION[$this->sessionName] = $user;
            return $user;
        } else {