added security for getting around cookie on login