added cookie sessions to track logon and added unit tests to the router to ensure correctness