added session data property, fixed session cookie behavior