secure cookie, valid for 14 days now