Implemented correct security.

using session now.