cookie expire 1year, restore newline after <body>
do not redirect to url/picture if referer=this page