Hi,
+1 by reading.
Just a small one: i would add the configured cookieDomain to the log entry
t3lib_div::sysLog('The regular expression of for the cookie domain (' .
$cookieDomain . ') contains errors. The session is not shared across
sub-domains.', 'Core', 3);
vg Steffen