removed max-age in cookie