https://halim.website/blog/7-session-attacks-and-defense-methods-in-iam/