fixes #106 by storing session data in cookies.