changed cookie to be hash