Better spoofing bypass checks, sets cookie if spoofing check failed