added cookie to auth.js