user validation both from cookie and login work.