Merge pull request #4128 from apache/revert-4094-for-now

Revert "Replace SHA-1 with SHA-256 for cookie authentication (#4094)"