Chrome to combat cookie theft with device bound session credentials