users and their sessions can now be isolated enabling bot detection