replaced cookies with session
ob_start()