send login-token cookie