[solitus]

Your front-end probably does not need to know about the signature which is the part you leave in an HTTP only cookie.