move towards http cookie support