new cookie should be a string