Restricting Web Tracking Cookies to Individual Containers