added faq for cookie auth