what's the signature format for session cookies? - Better Auth