Regerate the session ID at login to avoid session fixation