Pass session security flag from runtime_security to second parameter in setUserSession.