WPSE: Fortifying Web Protocols via Browser-Side Security Monitoring