- authorization with cookies fully done