Azure Seamless SSO: When Cookie Theft Doesn’t Cut It