include a site-wide option to default session cookies