fix: Don't store sensitive information in cookie.