Update session with http-cookie only

Update session with http-cookie only