attempt 2, set cookie