Added storing client session in cookies, auth filter at server side, redirect logic for non auth user and forbidden error