Why not make this a guint32? Cookies have no need to be negative, plus overflow behaviour for signed integers is undefined in C.

Not that it's a real problem... I couldn't imagine the system every issuing 2.1 billion cookies :).