Somewhere in our organization, we have a cookie being set that has a %40 (@ - at sign) in the name of the cookie. When nginx encounters this cookie, it responds to users with an "IOnvalid Request" message. If I manipulate the name of the cookie and remove the HTTP-encoded at sign, everything works as expected.

Is there any way to configure nginx to ignore this one cookie?