fix session test for new cookie handling