cookie returns a string