finished cookie authentication