add cookie and header