Testing for Session puzzling (OWASP-SESS-010)