adding routes to set cookies