fixed up some authService logic and added in cookie check