create session once / use it without cookies