By default, Rails session cookies have names that start with an underscore: _app_session. What's the reason for this?