should check cookies when login