cookie errors were caused by missing express sid, explicity calling out this case