https://www.sans.org/reading-room/whitepapers/testing/testing-stateful-web-application-workflows-36637