cookie-session tests