trying to pass token via cookies