To prevent fraud and manage the 30 minute session window, we use :.