[rwth-security] Scheming Cookies