added SESSION FIXATION feature;