remove underscore from session cookie names