update session cookie