Previous (Findings - Design based findings)
Credentials in URL
Next (Findings - Design based findings)
Insecure auth scheme