cookieSession: compare full value rather than crc32

fixes #1014