catalyst-plugin-session project Catalyst Plugin Session Vulnerabilities