attempting to store token in cookie