Cleaning up cookie / session interaction; lifecycle isn't correct (not usable)