Some pages of my website were vulnerable to SQL injection. The injection worked only when the user was logged in. I have now fixed this problem, and now I want to make sure that no similar problems remain. I have tried scanning with [sqlninja](http://sqlninja.sourceforge.net) and [sqlmap](http://sqlmap.org/) but neither program has a provision to give website login details. Are there any tools that can scan for injection vulnerabilities with a logged in session?