Randomly generate cookie value so that knowing the source doesn't let you access the app