An organization recently suffered from a web-application attack that resulted in stolen user session cookie information. The attacker was able to obtain the inf...