Add session redirection to prevent get param madness