damn you cookie middleware