updated object model
cookie manager
added nonce and sessionId to authorize request