URL copy issue and session not expiring

Question

Hi,

My web application uses SQL Server for StateManagement.

I have two problems because of this:

1. The session-id is part of url. Therefore if we copy and paste this url in a new browser, I continue to work with the older session. This is a huge security threat, please help.

 

2. If only the tab  is closed, the session doesnot expire immediatly. Please help.

 

Thanks

Shweta