Validating secure session