only add JSESSIONID cookie if not already present