Node Js Session Management Attacks