no need to keep references to cookie middleware to get the mac object