And one more thing.
The HCPS and session protection (against b2b) have little in common. 99.9% separated projects.

I myself accomplished very little. Made some suggestons which wern't used AFAIK. They said a lot of improvements may be done, but not nessesary before b2b cracked.
Now You can make it sport. Let me know You succeeded and I'll inform the friend of friend...