Fix indiscriminate JS blocking

Use a specially crafted cookie instead
Fixes #1