support extended session security