move sessioncookie to http client