Make session protected