fix cookie & session