The identity and access giant said hackers stole website cookies and session tokens from its customer support case management system.