use new cookie name and temp session middleware for compatibility with old cookie name