Session Management Vulnerabilities in Today's Web