improves session faking