Enable session

use session instead of normal cookie.