move to permanent cookies for sessions