Technical Note: Precautions Against Cookie Hijacking in an Access Manager Deployment - http://docs.sun.com/app/docs/doc/819-7849/gdqym?a=view