fixed session cookie to work with IE