Improve session tracking, use HTTPS protocol