Protects against cross-site request forgery attacks.
en.wikipedia.org/wiki/Cross-site_request_forgery
Saves the current PHP session.