do not disallow cookies

this seemingly makes things run to the next level -- single apps not leaking state.