Documenting the theme-as-cookie exploit fix.