Fixed #16 and fixed #17. Session-based scan is okay on wordpress site.

We have to create an empty session, then we also need to ensure the session created for the site is named ``hostname:port`` rather than ``hostname``.