Tightening session cookies and effective session management