The session is signed by default, so it is not editable by the user. You can also encrypt it to make it impossible for the user to view.
The session is signed by default, so it is not editable by the user. You can also encrypt it to make it impossible for the user to view.