Cookie removed when the session ends.

Lightweight browser execution context.

Isolation of application resources.

Rules governing password requirements.

Cookie restricted to secure transport.

Software extending browser functionality.

Isolation of a running process.

Securely transforming passwords into hashes.

Cookie inaccessible to client-side scripts.

Software adding browser capabilities.