only set cookie when a new session is created