https://blog.a21.dev/posts/cookie-hell/