has set a secret cookie.