adding secure session