Session security fix.