fixing some security issues and harderning service

app-code/api/account/get_user_data.php

@@ -1,13 +1,14 @@
 <?php
 // Simulate fetching user data from a database
-session_start();
+include "../utils/security.php";
+secure_session_start();
 header('Content-Type: application/json');
-if($_SESSION["logged_in"]!==true){
+if(!isset($_SESSION["logged_in"]) || $_SESSION["logged_in"]!==true){
 	$data=[
 		'status' => 'error',
 		'message' => 'not logged in'
 	];
-	echo json_encode($user_data);
+	echo json_encode($data);
 	exit();
 }