removed browser_fingerprint handling and added only cookie check for configured sessionid cookie