login / logout and cookie session working