add cookies to req