cookie safe way