using cookie jar instead of controller