Do report passwords work on Cookie, IP address or time-dependency?