The cookie can be set to client
and the random string will be generated and put into the cookie
next step is to deal with the post