Annie has just succeeded in stealing a secure cookie via a XSS attack