support for (signed) cookies