security: add secure cookie support
controller: added user login and logout api