store init_data so that we can always create the session item in cookie even without signing