Prefer `cookies.signed` in Rails