Secure sessions

Some best practice on sessions...