/concrete/startup/session.php
You are allowed to delete your post for 5 minutes after it's posted.
Delete
Are you sure you would like to mark this post as spam?
Mark as Spam
This script will report this post as spam and add a permanent IP ban for this user, type "DESTROY" below to continue.
DESTROY SPAMMER
You must have a user account and be signed to perform this action.
gets called really early in /concrete/dispatcher.php
You could look at User::regenerateSession() for some ideas maybe? Wish I could be more help.