This keeps the role cookie from being exposed over the network and being used in a replay attack against your application.

• 这可以使角色cookie不会公开在网络上,也不会被用在针对应用程序的重播攻击。