Session hijacking over wireless