use CookieStore for sessions