auth check cookie added