moved project to VS/IIS, use cookie to store API key