Reviewing Code for Session Integrity