Moved all SESSION-variables to ['security']-attr