cookie bad : url fun worse (x : url) : transaction page = return