I added secure cookies, so that they can no longer be spoofed, at least not very easily.