fix session cookie issue