add check for authed cookie