Hashed cookie verification