> It sounds like common sense, but many people have cookies and login information persisting for years at a time in their browsing sessions. If it requires qui

> It sounds like common sense, but many people have cookies and login information persisting for years at a time in their browsing sessions. If it requires quite a bit of domain knowlege (almost everything in security does), it's not 'common sense'.