don't check cookie