1. Find a clue to have session working properly, but need more depth regarding the security