messing around with cookie sessions, stuff is still broken