avoid looking up for session in shared cache when no cookie yet