The only thing to ever put in a cookie is the SESSION ID! Never put any user credentials into a cookie! If you need the user's email or name on the client, put

The only thing to ever put in a cookie is the SESSION ID! Never put any user credentials into a cookie! If you need the user's email or name on the client, put it into the HTML or load it via AJAX.