fixed session / user uuid with a cookie.