add cookies sessions auth and auth