Session 2: Human-centred security