Question: Can some hacker steal a web browser cookie from a user and login with that name on a web site?