Session hijacking via a MAC address