Renamed 'session' to 'cookieSession'