You will need to do a detailed analysis of your web application in order to try to identify vulnerabilities. This will include an examination of cookies and how they are being used.