make cookies properly scoped