cookie set escape_uri
image randcode img
session tolerate expire time

bugfix ...