get rid of sessions in favor of true cookies