cookies now include username and project_id