hedwig.cgi - cookie bof - return to system