Modules

accept only server-minted cookies