removed possibly unsafe use of pickle in cookie serialization