change where url data is pulled from to respect rewrite
make request configurable
cookie_attributes