add cookie auth
Merge branch 'feature/cookie-auth' into develop