“Criminals, over the past couple of years, have started using stolen authentication cookies because, effectively, you don't even have to authenticate. I don't need to try to pass a username and password because I have a valid cookie that hasn't yet expired. I can essentially just say, ...