authentication working but needs to get cookies back