Cookies from the past: Timing server-side request processing code for history sniffing