fetch session id from cookie instead of response body