title: Impacts when session is not invalidated on multiple login
body: <p>In web applications, what are the impacts when session is not invalidated when multiple logins happen from different clients (browsers)?</p>