Overflowing a bot browser cookie jar to evict an HttpOnly role cookie that JavaScript could not overwrite, then writing the privileged value in its place
