Ensure SSL_set_session clears the old session from cache if it is bad