it's reasonable to assume that, if you steal a pile of passwords and then release them to the web for cracking, people will change their passwords. given that, it's not too crazy to write some kind of script that gets (and renews, as required) a valid session key for each password you crack - it's a simple, smart way of keeping access to the system even after the expected change in password.

sarcastic comments don't make things any better.