gustafn
committed
on 15 Mar 10
- bind session cookie to IP address to avoid session highjacking