Removed to session manager turns out that it doesn’t like more than one session
Added some .htaccess for more security