fix Session security warning