Cookie keys must be bytes, too