It is important keeping HTTP session managuement secure. Session related security is described in Session Security section of Session module reference.