Windows doesn't let you move things into the cookies folder. In order for someone else to spoof a cookie to login as you, they'd need your password.