add session & cookie