Use a comma, not a semicolon to separate sessionIDs in the cookie