Using hmac to make cookie secure as hell. Git ignored the file holding the secret string used by hmac. The counter works too!