Your session is secured with an HTTP-only cookie containing a JWT token. The token is validated on every request by Cequence Defender.