refactored userAuth to basicAuth
begin sep cookie auth
rot func for sep cookie decoding/encoding