The session regeneration causes issues with sessions changing too quickly when lots of graphs are on a page or hitting back in the browser.
It was put in as an additional safe guard so shouldn't be an issue removing it. Trying to resolve this is going to take some work due to the number of http calls that some pages make, each one updating the session ID all the time.
Removed session regeneration
Updated null to false for secure cookie