Please share details about how security testing for session management can be performed for an web application. How results are analysed.