auth cookie save id only