haserl: use a different prefix for cookie variables to prevent form variable injectio...