a mechanism, embodied on a computer-readable storage medium, that receives a response from the remote site, the response including a request directed to a cookie operation and policy information, the policy information comprising a set of at least one valid token in association with the cookie operation;