https://softwarepatternslexicon.com/php/patterns-for-security-in-php/secure-session-management/