  get(`/-/load-email-addrs-login-methods?userId=${userId}`, response => {
    success(response);
  });
According to WASC, "Insufficient Session Expiration is when a web site permits an attacker to reuse old session credentials or session IDs for authorization."