vcl: validate closed sessions on disconnect and reset