remove mongo dep for package, use Cookie as default store