replaced session with cokkie and addess check on ip requesting the page