use default cookie's signature