work around CGI::Session constructor issues