decode cookies.username