support cookie only for 127.0.0.1