It is important to keep your HTTP session management secure. Session related security is described in the Session Security section of Session module reference.
