Technical Note: Precautions Against Cookie Hijacking in an Access Manager Deployment