Adding IP session management for additional security. If the user's IP address changes, then log them out of the system. This will help prevent session hijacking.