cookie at runtime

validate only one of each container per session