95% of Attacks Come From Authenticated Sessions