Do not protect information in the cookie. Information in the cookie is stored in clear text and not validated when sent back to the server.