This, and especially #3. Having the same cookie used on a different computer should be the reddest flag of them all. This could be identified by the user agent

This, and especially #3. Having the same cookie used on a different computer should be the reddest flag of them all. This could be identified by the user agent (different version of the Slack client) and a different IP (cookie accessed from a different country than it was originally created).