change cookie path to /
changed cookie string value
add secret key
add a logout page that clears user cookie