Security Risk

I am currently using the Avada WordPress Theme with the recommended settings from the creators and we have a plugin that uses PHP $_SESSION variables and while the w3 Total Cache plugin is enabled we have noticed these session values persisting between different sessions. This could result in one user seeing the other user’s session values. Is there a setting within your plugin that we can utilize that will ensure this cross-pollination won’t occur. Thank you