Added in response cookie, pushing in token for now but will hash that to make it more secure soon