Valid cookies are 64 bit unsigned ints >= 1.  In languages which care
about signed vs unsigned (golang) we need to be consistent.