removed cookie impl for user session