Fix code scanning alert - Construction of a cookie using user-supplied input

[rtibbles]

We should validate the format of the visitor_id cookie before setting it, to ensure we're not storing arbitrary user supplied data.

Tracking issue for:

• [ ] https://github.com/learningequality/kolibri/security/code-scanning/55