How to fix -- Web Application Session Vulnerabilities