because the user may clear cookies