A bit cleanup work with cookie:
1. remove overwork like string map toByte or string toCharArray map toByte.
2. Replace 2 cookies with one using base64 encoding. So it is: ID.SIGNATURE (JSESSIONID.HSSESSIONID)
3. Use SecureRandom instead UUID

PS. not sure if getSessionId should return Box because now it return Full every time.