adding session cookie