How Weak Session Management Lessens Security even with Strong Authentication Mechanisms Featured How Weak Session Management Lessens Security even with Strong Authentication Mechanisms