update cookie session