add _bake_cookie() and handler()