add cookie stuffing checking code