Change spoofing valve to use prefixed cookies rather than a session variable