Device Bound Session Credentials: A Protocol for Protecting From Cookie Theft - View it on GitHub