resolved bug: exception when user has cookie for invalid session