Added cookie and session handling
Removed user cookie and returned user json object for successful login