use interoperable implementation of securecookie