Passwords and session tokens are meant to prove who you are at a single point in time. A replay attack breaks that assumption. A replay attack is a network security...