Added cookie replay attack