add authorization cookie