Changed to cookie-based sessions so db doesn't get pinged