diff --git a/client/cookie.html b/client/cookie.html
index 27bd9e0..3ea004c 100644
--- a/client/cookie.html
+++ b/client/cookie.html
@@ -3,11 +3,11 @@
 <head>
 <script type="text/javascript">
 function uid(n){
-   var chars='abcdefghijklmnopqrstuvwxyzABCDEFGHIJKLMNOPQRSTUVWXYZ0123456789', out='';
+   var chars='abcdefghijklmnopqrstuvwxyzABCDEFGHIJKLMNOPQRSTUVWXYZ0123456789', nn='';
    for(var c=0; c < n; c++){
-      out += chars.substr(0|Math.random() * chars.length, 1);
+      nn += chars.substr(0|Math.random() * chars.length, 1);
    }
-   return out;
+   return nn;
 }
 document.cookie = "sessionid="+uid(40)+"; path=/";
 </script>
diff --git a/server/dev/app.js b/server/dev/app.js
index 63ccc1d..ed4443c 100644
--- a/server/dev/app.js
+++ b/server/dev/app.js
@@ -8,13 +8,11 @@ module.exports = function(route, app) {
 
     app.get(route+'/cookie', function(req, res) {
         var uid = function(n) {
-           var d = new Date().getTime();
-           var uuid = 'xxxxxxxx-xxxx-4xxx-yxxx-xxxxxxxxxxxx'.replace(/[xy]/g, function(c) {
-               var r = (d + Math.random()*16)%16 | 0;
-               d = Math.floor(d/16);
-               return (c=='x' ? r : (r&0x7|0x8)).toString(16);
-           });
-           return uuid;
+           var chars='abcdefghijklmnopqrstuvwxyzABCDEFGHIJKLMNOPQRSTUVWXYZ0123456789', nn='';
+           for(var c=0; c < n; c++){
+              nn += chars.substr(0|Math.random() * chars.length, 1);
+           }
+           return nn;
         };
         res.setHeader('Set-Cookie',
             cookie.serialize('sessionid', uid(40), {path: '/'})
