Some clean up of the way the profiles are found/created.
Don't use dns UUID, its constant, cookie should be httpOnly because this should not be used by js.