add login-logout with cookie persistance