li>Set up a context for the web application</li>
		<li>Set up the session management method to <i>Cookie-based Session Management</i></li>
		<li>Make sure your browser proxies everything through ZAP and log into your application using the browser</li>
		<li>Go to ZAP and identify the request that was done for the login (most usually it's a HTTP POST request 
		containing the username and the password and possibly other elements)</li>
		<li>If there is an anti-CSRF token in the login request, add the token n