Removed filter from session setter

It should be secure as long as POST and GET are filtered.