add some fancy cookie-based UID tracking