Cookie is no set from server side, added also RequestVerificationToken
Added logout
Added noAccessCallback to checkAccess