added a cookie to steal