added wrough draft of session hijacking