mod. Make all cohort id requests via query sub-package.
fix. secure user queries.