session security and layout improvements