Reduced false alerts from session monitoring.
NavEd's session monitoring was sending alerts when a user's session expired after a normal password change. This is expected behavior — when you change your password, other active sessions are automatically signed out for security. The monitoring now correctly treats this as routine rather than flagging it as an error.
Fixes and Improvements¶
- Session hash mismatch logging downgraded from error to warning (no longer triggers Sentry alerts)
- Added defensive support for future secret key rotation to prevent unnecessary session invalidation