client side cookies works