login/logout user with cookie done