update wsfed
add cookie sessions to enable SSO