Merge pull request from GHSA-2ccf-ffrj-m4qw

Signed-off-by: RafaelGSS <rafael.nunu@hotmail.com>
Signed-off-by: Matteo Collina <hello@matteocollina.com>
Co-authored-by: Matteo Collina <hello@matteocollina.com>

README.md

@@ -79,6 +79,11 @@ server.register(fastifyPassport.secureSession())
 fastifyPassport.use('test', new SomePassportStrategy()) // you'd probably use some passport strategy from npm here
 ```
 
+## Session cleanup on logIn
+
+For security reasons the session is cleaned after login. You can manage this configuration at your own risk by using
+`clearSessionOnLogin (default: true)` and `clearSessionIgnoreFields (default: ['passport', 'session'])`
+
 ## Difference between `@fastify/secure-session` and `@fastify/session`
 `@fastify/secure-session` and `@fastify/session` are both session plugins for Fastify which are capable of encrypting/decrypting the session. The main difference is that `@fastify/secure-session` uses the stateless approach and stores the whole session in an encrypted cookie whereas `@fastify/session` uses the stateful approach for sessions and stores them in a session store.