bitaccess: BYASSING OTP Verification

OTP was not properly checked on the session so it could have been bypassed by intercepting the server response and changing its value to valid...