properly escaped cookies