better update.php file, remove TODO, put back checkCookie() in login.php