Added tighter cookie security rules to PHP session