added cookie, session and login handler