concluded im-3 e im-5 without storing authentication's cookie