implemented simple user auth interface
use cookie as session provider
redirect after logining