fix cookie handling in UserAbstract