remove superfluous explicit cookie handling

the session takes care of it already