rudimentary session cookie generation