Securing session & verifying claims...