use cookie string instead of password to log in