Comment by commonenemy

you can always do geo and browser signature checks aginst sessions