Session: sendCookie also can't be private in order to allow extension/overloading