References to, includes from, and redirects to security issues in project open regarding session identifier