store location in cookie instead of session