some stuff moved around a little for testing / debugging
added a check for cokies enabled in client browser