switched to cookie for username