set user session in transient cookie