set cookies in session controller create action