application is vulnerable to replay attack