Your front-end probably does not need to know about the signature which is the part you leave in an HTTP only cookie.