empty is already taken care of by preg_match
dont check if cookie session id exists