fix: cookie was shown to the non-authorized users