fix some cookie restriction