added token and cookie for signin