Why does checkSession need cookies?