Make cookie filename generation more secure