work out details for cookie config in UserAbstract