working except of 1c authorization..
not sure why authorization not working
expire time and path validation for cookie in #42