incomplete, added a login form, cookie validation not working due to some mismatch