Remove occurences of session_start()
TYPO3 has its own session management and per default it should not be required to use an additonal PHP session.
Currently session_start() calles are spread around in the core which is really sad (that wasn't the case in earlier TYPO3 versions).
Since it opens a frontend session for every request to the page. (TYPO3 session management is more intelligent here)
This results in many tmp files (PHP session) and a default PHPSESSION cookie.
I understand that the phpsession is required by rsa auth (but even here the TYPO3 session could be used imho).
But it would be great if it could be removed everywhere else.