no longer using cookies, since they are buggy and weird with caching using a access token that "expires" in 10 minutes