Change session id on authenication field added

Patch by fjodorver

git-svn-id: https://svn.apache.org/repos/asf/tomcat/trunk@1689080 13f79535-47bb-0310-9956-ffa450edef68

java/org/apache/catalina/authenticator/jaspic/provider/modules/FormAuthModule.java

@@ -70,6 +70,8 @@ public class FormAuthModule extends TomcatAuthModule {
     private Realm realm;
     private LoginConfig loginConfig;
 
+    private boolean changeSessionIdOnAuthenication = true;
+
 
     public FormAuthModule(Context context) {
         super(context);
@@ -392,7 +394,7 @@ protected void forwardToLoginPage(Request request, HttpServletResponse response)
 
 
     private boolean getChangeSessionIdOnAuthentication() {
-        return true;        // FIXME
+        return changeSessionIdOnAuthenication ;
     }