Model should not access `$_COOKIE` directly. Move to controller.