add cookie detection, add payload