It is important keeping HTTP session management secure. Session releated security is described in Session Security section of Session module reference.