fixed cookie setting and hotlink tracking