encrypt session variables and random