title: Symfony new session_id in every request
body: <p>Some days ago I added Custom autenticator to my project and configured <code>security.yaml</code> as this:</p>
  <pre><code>security:
      providers:
          app_user_provider:
              entity:
                  class: App\Entity\BasePublic\Users
                  property: email
                  manager_name: default
      firewalls:
          dev:
              pattern: ^/(_(profiler|wdt)|css|images|js)/
              security: false
          main:
              anonymous: true
              guard:
                  authenticators:
                      - App\Security\ApiTokenAuthenticator
      access_control:
  </code></pre>
  <p>In all request old session is destroied and new created or not.</p>
  <p>Some session is empty(0kb) and in others is stored all user class with their dependencies(-/+0.5mb)</p>
  <p>In some requests its start to trown error:</p>
  <pre><code>Warning: SessionHandler::read(): open('sess_folder', O_RDWR) failed: Permission denied (13)
  </code></pre>
  <p>My <code>framework.yaml</code>:</p>
  <pre><code>framework:
      secret: '%env(APP_SECRET)%'
      session:
          enabled: true
          handler_id: 'session.handler.native_file'
          save_path: '%kernel.project_dir%/var/sessions/%kernel.environment%'
          cookie_secure: auto
          cookie_samesite: none
          name: session-front
  
      php_errors:
          log: true
  </code></pre>