Every session by default is protected by a Passcode, a 4 digits random number, generated every time a new session starts. You can turn this option off through the Web Console.