It is important keeping HTTP session mangement secure. Session releated security is described in Session Security section of Session module reference.