CVE-2025-46336 (rack-session): Rack session gets restored after deletion