cookie_id must be less than 10 characters