W3AF

http://w3af.sourceforge.net/

webSpider
set ignoreRegex *login.*|.*logoff.*

set ignoreRegex .*sign_in.*|.*sign_out.*

http://sourceforge.net/apps/trac/w3af/wiki/perform-authenticated-scan-howto

spiderMan