weak-session-management 1 Weak Session Token Design – Predictable MD5-Based Session Hijacking | CopyPasta May 7, 2026