Multi-factor authentication is supposed to be the lock on your digital front door. But what happens when an attacker finds a way around it — not by breaking the lock, but by walking in right behind someone who just unlocked it? Session cookie hijacking lets attackers do exactly that, and…