ADD: prevent session stealing with the secure server.