another typo in CookieStrategy