please add a check that COOKIE_NAME_SEP does not appear in opts.cookieName, paranoid defense against weird parsing.