add cookie options to session