protecting sensitive cookies