full user authentication

cookies and etc on user login and refresh page