Do not allow users to manually modify hidden variables or cookies