Paul Ruben's "Watch for Authentication Bypass Vulnerabilities"

Read this article.