really shouldn't passing cookies around