cookie authentication
add logout button