accept only served-minted cookies