Session: The what and why of WordPress security