Update SessionFixationDefense.java

Prevent serialization, deserialization and cloning