add session and cookie