Fixes #1892 - Stop session hijacking with UA check