How to Strengthen Authentication Against Modern Account Abuse with Session Enrichment