although the security issue was serious, if someone got your secret salt, they can forge cookies.