disable session_hijacking