https://waibui.github.io/posts/portswigger-lab-authentication-vulnerabilities/