Testing Identify application exit/handover points (OWASP-IG-008)