pub cookie prerequisite protected directory