Based on ongoing investigation, Yahoo believes that forged cookies were used to gain access to accounts