cookie authentication
remove deps away from repo