add extra keys to the cookie blacklist