Comment on Autologout cookie is not secure