try to secure the cookies