no more PHP code inside HTML
pull cookie settings into own file for easier embedding