since we use request sessions we can ignore cookies handling