I we can also test it by cookies - as some systems are 
cookies dependent - and user enter the password or any or 
the secure matter - it should come in encrypted form in the 
cookies .