user role in cookie