https://www.hackingarticles.in/comprehensive-guide-on-broken-authentication-session-management/