Criminals are emulating an already authenticated session. So from the perspective of the website, it just sees that it’s a ...