Hard refresh clears your cache but not your cookies. You can manually clear your cookies by opening dev tools in chrome, going to the application tab and clicking this button:
But the goal isn't to have new session every refresh, it's that you want multiple concurrent sessions, to spread your attempts across multiple backends. Hence the advice of multiple browsers, chrome profiles, using incognito and non-incognito.