[4.6] feat: force PHP default 32 chars length at 4 bits to Session ID

[4.6] feat: force PHP default 32 chars length at 4 bits to Session ID #9629