return cookie for login