ENH: cookie sessions working