change how cookie value is generated for 2fa browser registration policy