section 5:
sessions and cookies