RC2 modified session to cookie