blog with user authentication to test cookies and password encryption