login modal
load + store token in cookie