Now secure against session theft