Local Windows Admins Can Hijack Sessions Without Credentials