some initial feature refactoring
session hijacking safeguards, auth features