id say environment variables and hint that it accesses $_ENV. Also ive just removed the cookie setting stuff, so cookies can only be read.