support for cookies and password hashing