Used session instead of cookie.