add back in modhash / cookie login