nginx limit by login user's cookie