make magicCookie and fingerprint invisible to user