cookies means random number selected from session pool..
to test cookies
1.when user log in by entering cookie number in place of
password it should not log in
2.cookie should vary session to session,no unique cookie
3.when user is not in use of particular page for longer
period of time then that cookie will go off and it should
display message as "page has been expired".try again...