Able to sign-in without SESSION_KEY set correctly

Using staging deployment here: https://lightning-tip-jar-one.vercel.app/

where the SESSION_KEY / SESSION_NAME are set to nonsense values

Was able to sign-in (to an existing account) via Wallet Login and get recognized, then register a Merchant, and Withdraw from said Merchant.

staging-site (with wrong SESSION_KEY)

staging-site (with correct SESSION_KEY)

Start by reproducing the staging deployment with incorrect SESSION_KEY and SESSION_NAME values, using Wallet Login and the existing-account flow described in the issue. Trace the session handling through sign-in, Merchant registration, and withdrawal. Done means the staging application does not recognize or authorize an account when those session settings are invalid.

Written by the indexing model from the issue text.