[urgent fix][issue #160] close cookie login vulnerability