add cookie support and fake login