Session management security: Best practices for protecting user sessions