use cookieSession so we can launch in production mode