customer session fixation: check user-agent