Does using Redis as a session store will mitigate session replay attacks?

Question

In Ruby on Rails security docs it written that using CookieStore as the session store is open to replay attack: http://guides.rubyonrails.org/security.html#replay-attacks-for-cookiestore-sessions

1. Is it true if I only save the session_id?
2. Does changing the session store to Redis will mitigate the vulnerability? see this commit: https://gitlab.com/gitlab-org/gitlab-ce/commit/ba7c1764be87f272759471bde01b92dcc147e952