> it encrypts the session cookie and send it as a URL parameter when it requests a media file.
Funnily enough we came up with pretty much the same solution
> hopefully this is a bug in iOS10 that will be fixed
Let's hope so, not exactly impressed with Apple this month seeing as they also decided to drop PPTP VPN support from macOS and iOS.