*%session_start()%* isn't enough.