https://jetamooz.com/broken-authentication-in-security-testing/