new more secure sessions, based upon password checking