quick security fix for session data in the session table