checking for cookie on /login page