session cookies are rebuilt not maintained