basic cookies methods, test fail security policy