trying to use secret cookie id for image curling