fix Session regenerateId bug, remove CLI Cookie since it's not necessary