вот нашел такое решение:
как отключить сессии:
в файле load.php находим строки:
// This isn't meant to be reliable, it's just meant to catch most bots to prevent PHPSESSID from showing up
и приводим их к виду:
// This isn't meant to be reliable, it's just meant to catch most bots to prevent PHPSESSID from showing up.
$context['browser']['possibly_robot'] = $context['user']['is_guest'];
//$context['browser']['possibly_robot'] = !empty($user_info['possibly_robot']);
// Robots shouldn't be logging in or registering. So, they aren't a bot. Better to be wrong than sorry (or people won't be able to log in!), anyway.
//if ((isset($_REQUEST['action']) && in_array($_REQUEST['action'], array('login', 'login2', 'register'))) || !$user_info['is_guest'])
//$context['browser']['possibly_robot'] = false;
}