don't check cookie if already logged in