add a cookie parsing middleware