News VPN applications insecurely store session cookies [Vulnerability]