question about file folder _session on my gotmls

I wouldn’t say that it’s normal but it is designed to do that if you are using the session based brute-force login prtection and you server fails to create persistent session files in the default temp folder. Your server must not be configure to handle sessions correctly if this alternate method is active. Ask your hosting provider about why sessions are not working.

Let me know if you have any more questions about this.