demo for cookie and session