which would mean that the session info is also going over the clear, which means that you don't need to dump the files or info, you can use their own client to do that along with a forged session token