wrong session placement for cookies

Signed-off-by: John Rayes <live627@gmail.com>