Large-Scale Analysis & Detection of Authentication Cross-Site Request Forgeries