#14 - improved authentication with saving session token to cookie