safer  lang-cookie  handling