Session hijacking protection added