full url; empty string if no cookie available