will this use the security cookie param?