[tor-dev] Proposal xxx: Safe cookie authentication