authentication by cookie changed