debugged cookie issue, authentication properly works with secure cookie and db hashing