disabled session cookies for image route