CVE-2022-38054: Apache Airflow: Session Fixation

[Jedidiah Cunningham]

Description:

In Apache Airflow versions 2.2.4 through 2.3.3, the `database` webserver 
session backend was susceptible to session fixation.

Credit:

The Apache Airflow PMC would like to thank Kai Zhao for reporting this issue.