Hi , Does Adding Antiforgerytoken protect against the session hijacking ? if not , what would I should do to avoid session hijacking ? Thank you