3.9.4 Web Attacks: Session Management Exercise