tweaked session cookie