user authentication added

login, cookie session added