Hi,
Working on this bug [0], I noticed that when using the 'signon' auth_type - invalid JSON is produced - lots of XHTML errors can be seen with HTML Validator
However, disabling @ini_set('session.use_trans_sid', true); in libraries/session.inc.php fixes all these problems.
Doing so would require users to enable cookies in their browser but it's already a requirement per Documentation.html.
Opinions?
[0] https://sourceforge.net/tracker/?func=detail&aid=3398788&group_id=23...