added cookie security