control logging of cookie access failure
Merge remote-tracking branch 'origin/master' into 1.4.5
more control on what gets logged in the security log