As session-cookie stealing cyber attacks bypass 2FA protections, Gmail users should open a second account in case they fall victim—here’s how and why.