Session anti-theft and todos fixed