use cookie session instead, and auto release 0.0.6