I received an error from the Security testing team as follows:
It was observed that same session value is used for different sessions. After logout, session value should be cleared and the user should be provided a new session value every time user logs in. It was observed that every time user login the session value was set to the following value "xxxxxx-xxxx-xxxx-xxxx-xxxxxxxxxxxx"
How to rectify this? What would be the best approach to avoid these kind of issues?