Don't store full cookie value in db. Integrate site secret into cookie value.