SS-2016-014: Pre-existing alc_enc cookies log users in if remember me is disabled

PKSA-k578-1frj-r2p3

Affected package: silverstripe/framework

Affected version: >=3.1.19,<3.1.20|>=3.2.4,<3.2.5|>=3.3.2,<3.3.3|>=3.4.0,<3.4.1

Reported by:
FriendsOfPHP/security-advisories