Secure sessions and protected account access