fix: deleting app is broken
use cookie session