set cookie for users so they can stay logged in