add auth, cookie