Hashed cookie and validation for user ID