cookies isn't a hash anymore