Using Burp Sequencer to evaluate the quality of session IDs