Accessurl – Share accounts without giving away your password (accessurl.com)

is it just me or does this seem like a bad idea?

Basically cookie/session hijacking as a service - what could go wrong?