cookieSession - add a test to ensure its lazyness