Added session fixation threshold