bug fix - login cookie