fix login add userId to cookie