Import session cookies

[ghost]

Describe the bug
When logged in as a user in one browser session, the admin can view the session of a user by simply importing the cookies

Dev Tools
just copy your session cookie from your browser session as a user and open another browser or icognito session and import the cookies. You will have full access to your user session

An admin can also snoop on a user with this method, just needs the cookie.

[ghost]

Snooping on a user session using cookie import