implemented authorization, added empty cookies api