Fix open

Returns to using cookies rather than stuffing state into the URL