must set cookie in vm.args