moved cookie logic to response widget, close #97