https://php-include.com/strategies-for-secure-php-session-management-in-web-applications/