update on login cookie, layout and db session share