> When logging in from a home or work computer, a cookie can be stored so that no verification call is required.

Try XSS.