response = http.post( 'http://192.168.1.25:8080/WebGoat/j_spring_security_check', parameters: { 'username' => 'guest', 'password' => 'guest' }, mode: :sync, update_cookies: true ) framework.options.session.check_url = to_absolute( response.headers.location, response.url ) framework.options.session.check_pattern = /Welcome to WebGoat/