cookie can only use printable characters