Chapter 10. Restricting the session to a single application