Add session security, and acces normal forms