consolidated cookie creation so that the removal cookie has the same path and domain properties
now the application is stateless