change cookie info and authentication method. add a 303 jump after submiting a message.
update README