send no session error when cookies are missing