Hi Sub, you are asking for security question I believe. You need to make sure you pass an unpredictable "session" token.