add login page & fix cookie issue