fixed script: correct cookie and payload data