fix: cookie handling with js