Currently the server will automatically generate a new session & notification
buffer anytime it gets a SOAP request that doesn't have a valid session ID in it
(unless that request has <nonotify> or <nosession>).
This is causing us trouble -- there are a ton of internal and 3rd party
integration apps that make a few soap calls, and basically none of them care
about having a session of having notifications.
Lets change the server (and all affected clients) to require an explicit-request
to create a session. The client impact should actually be pretty small, since
only those clients that really do need notifications (Web Client, ZClient...and
maybe one or two others) will need to be updated.