code: public static Cookie createCookie(String cookieName, @Sensitive String cookieValue, HttpServletRequest req) {
          return createCookie(cookieName, cookieValue, -1, req);
      }
docs: /*
  In case, the ReferrerURLCookieHandler is dynamic in every request, then we will need to make this into
  OidcClientRequest. And do not do static.