Encrypted the encryption key to ensure it is not exposed in the $_SESSION variable