working on the redirect
still figuring out cookie