  Server.loadMyself((anyMe: Me | NU, stuffForMe?: StuffForMe) => {
    // @ifdef DEBUG
    // Might happen if there was no weakSessionId, and also, no cookie.
    dieIf(!anyMe, 'TyE4032SMH57');
    // @endif
    const newMe = anyMe as Me;
    if (isInSomeEmbCommentsIframe()) {
      // Tell the embedded comments or embedded editor iframe that we just logged in,
      // also include the session id, so Talkyard's script on the embedding page
      // can remember it — because cookies and localstorage in an iframe typically
      // get disabled by tracker blockers (they block 3rd party cookies).
      const mainWin = getMainWin();
      const typs: PageSession = mainWin.typs;
      const weakSessionId = typs.weakSessionId;
      const store: Store = ReactStore.allData();
      const settings: SettingsVisibleClientSide = store.settings;
      const rememberEmbSess =
              settings.rememberEmbSess !== false &&
              // If we got logged in automatically, then logout will be automatic too
              // — could be surprising if we had to click buttons to log out,
              // when we didn't need to do that, to log in.
              typs.sessType !== SessionType.AutoTokenSiteCustomSso;
      if (mainWin !== window) {
        mainWin.theStore.me = _.cloneDeep(newMe);
      }
      sendToOtherIframes([
        'justLoggedIn', { user: newMe, stuffForMe,
              weakSessionId, pubSiteId: eds.pubSiteId,  // [JLGDIN]
              sessionType: null, rememberEmbSess }]);
    }
    setNewMe(newMe, stuffForMe);
    if (afterwardsCallback) {
      afterwardsCallback();
    }
  });
According to WASC, "Insufficient Session Expiration is when a web site permits an attacker to reuse old session credentials or session IDs for authorization."