password and cookie name settings