use cookieSession to provide remember me feature.