https://www.elastic.co/security-labs/revisiting-warmcookie