oktw
says to
#ysitd
<mmis1000>:
http://devco.re/blog/2014/06/03/http-session-protection/