Renewing session after login to prevent hijacking