Testing for Session Fixation (OWASP-SM-003)