remove *cookie-path*
use get-random-from-dev to implement sid