Securing your workspace…Checking the HTTP-only browser session