Protection against cross-site cookie tracking extended by Mo