prevent bookmark download when mobile is not verified yet; keep user cookie on logout