is `/` allowed character in generated cookie? Then it should be enclosed in quotes, otherwise config will barf.