cookieName, sessionId clarified in UserAbstract