add cookie logic
set cookie on log in