only autostart session if login cookie exists