add multiple session security in config

implement in session