Security Update

Try to fix XSS attack and Session Fix attack