private boolean isRealOwnerOfToken(HttpContext c, Cookie tokenCookie)
     throws IllegalAccessException, InvocationTargetException, InstantiationException {
   LOGGER.debug("HttpContext : " + c + " Cookie : " + tokenCookie);
   Token token = TokenFactory.getInstance().createToken(tokenCookie.getValue());
   String hash = generateAttributesHash(c.getRequest());
   return hash.equals(token.getAttributesHash());
 }