allow cookie options in the config