Improve session security

Improve session security against XSS Session Fixation attacks.