cookie based unlocks (soon to be user-choice)