small fixes, inclusing cookie creation on login