fixed: randomized cookie