Session security issue fixed