The callback is invoked to check if the engine can access the given cookie or not.
Use the can method to allow access to the cookie
Use the cannot} method to deny access to the cookie.
If the callback throws an exception, the can method will be invoked.
R