add sample code for cookie auth

- needs implementation
- pasted only working poc
- will break in this form