set cookies on login logout