signin signout added, secure cookie supported