append cookie & session