phpBB session table exhaustion

The includes/sessions.php unnecessarily adds session item into session table and therefore vulnerable to a denial-of-service attack...