$150 Bounty For Session Fixation Vulnerability | Broken Authentication And Session Management