cookie-username association
moved app core logic into modules