Can you explain the concept of session hijacking and how to prevent it?

---