rack.sesssion is nil in our env variable. use http_cookie hash instead