max length of the cookies verification