Add security notes regarding the new cookie system based