sign the cookies