this dir needs to be present for CGI::Auth to store sessions
