test cookie
fix permission