SECURITY: Attach DiscourseConnect (SSO) nonce to current session (#12124)

spec/support/integration_helpers.rb

@@ -35,6 +35,15 @@ module IntegrationHelpers
   end
 
   def read_secure_session
+    id = begin
+      session[:secure_session_id]
+    rescue NoMethodError
+      nil
+    end
+
+    # This route will init the secure_session for us
+    get "/session/hp.json" if id.nil?
+
     SecureSession.new(session[:secure_session_id])
   end
 end