Update SessionProtection.php