add cookie help to handle security + encryption