Fixat session hijacking. Checkar HTTP USER AGENT