Added cookie based "log in" - nothing server side yet.