It is important keeping HTTP session management secure. Session related security is described in Session Security section of Session module reference.