Changing session id after binding.

Author: bitstorm

wicket-auth-roles/src/main/java/org/apache/wicket/authroles/authentication/AuthenticatedWebSession.java

@@ -71,6 +71,7 @@ public final boolean signIn(final String username, final String password)
 		}
 		else if (authenticated && signedIn.compareAndSet(false, true))
 		{
+			changeSessionId();
 			bind();
 		}
 		return authenticated;