[demo] A posible mitigation to session fixation